Deviceways

Travel router

TP-LINK TL-WR802N

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1 · Qualcomm Atheros QCA9533 Wi-Fi
Retired support documentedFlash: 4 MB · Processor: Qualcomm Atheros QCA9533-AL3A · Memory: 32 MBOpen device guide
v2 · Qualcomm Atheros QCA9533 Wi-Fi
Retired support documentedFlash: 4 MB · Memory: 32 MBOpen device guide
v4 · MediaTek MT7628N Wi-Fi
Flash: 8 MB · Memory: 64 MBGet OpenWrt firmware Release listed · 25.12.6
v1; v1.0 · Qualcomm Atheros QCA9533
Open hardware record
v2 · Qualcomm Atheros QCA9533; v2.x · Qualcomm Atheros QCA9533
Open hardware record
v4.x · MediaTek MT7628N
Open hardware record
v4 · MediaTek MT7628N
Open hardware record Release listed · 25.12.5
Original project github.com

v1 · Qualcomm Atheros QCA9533 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
U-Boot TFTP recovery; see forum

v2 · Qualcomm Atheros QCA9533 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
TFTP generic; GUI OEM

v4 · MediaTek MT7628N Wi-Fi

First installation
U-Boot TFTP recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link tl-wr802n v1 — device documentation (github.com)

Hardware revision
v1

Device details

tp-link tl-wr802n v2 — device documentation (github.com)

Hardware revision
v2

Device details

tp-link tl-wr802n v4 — device documentation (github.com)

Hardware revision
v4

Device details

TP-LINK TL-WR802N v1.0 — TechInfoDepot (github.com)TP-LINK TL-WR802N v1.0 — WikiDevi (github.com)

Hardware revision
v1.0

Device details

TP-LINK TL-WR802N v2.x — TechInfoDepot (github.com)TP-LINK TL-WR802N v2.x — WikiDevi (github.com)

Hardware revision
v2.x

Device details

TP-LINK TL-WR802N v4.x — TechInfoDepot (github.com)TP-LINK TL-WR802N v4.x — WikiDevi (github.com)

Hardware revision
v4.x

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v1

OpenWrt · v1 · Qualcomm Atheros QCA9533 Wi-Fi

OpenWrt · v1 · Qualcomm Atheros QCA9533 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP recovery, see forum
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Discontinued 2017

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v2

OpenWrt · v2 · Qualcomm Atheros QCA9533 Wi-Fi

OpenWrt · v2 · Qualcomm Atheros QCA9533 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
TFTP generic, GUI OEM
Availability recorded by source
Discontinued

Device details

Device details — v4 — Source documentation (openwrt.org)

Hardware revision
v4

OpenWrt · v4 · MediaTek MT7628N Wi-Fi

OpenWrt · v4 · MediaTek MT7628N Wi-Fi — v4 — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Available 2019

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.5 (v4.0)

TL-WR802N v4

Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N

CVE-2026-3227

Affected firmware
Before V4_260304
Fix
Fix details in the linked record
Read TPLink CVE record
Details and sources
CVE updated

A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file that results in execution of OS commands with root privileges during port-trigger processing. Successful exploitation allows an authenticated attacker to execute system commands with root privileges, leading to full device compromise.

CVE published

TL-WR802N

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands

CVE-2023-36489

Affected firmware
firmware versions prior to 'TL-WR802N(JP)_V4_221008'
Fix
Fix details in the linked record
Read jpcert CVE record
Details and sources
CVE updated

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'.

CVE published

TL-WR802N V4(JP)

TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.

CVE-2021-4144

Affected firmware
firmware versions prior to 211202
Fix
Fix details in the linked record
Read jpcert CVE record
Details and sources
CVE updated

TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.

JVNVU#94883311: TP-Link TL-WR802N V4(JP) vulnerable to OS command injection — TL-WR802N V4(JP) (jvn.jp) ↗
CVE published

TP-LINK TL-WR802N

TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message

CVE-2021-29302

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the network, which may lead to remote code execution.

CVE-2021-29302 record (github.com) ↗
Check more security advisories for this device · CVE.org